@pome-sh/cli 0.1.1 → 0.2.0

package/node_modules/@pome-sh/twin-stripe/fidelity.inventory.json

@@ -0,0 +1,425 @@
+{
+  "twin": "stripe",
+  "package": "@pome-sh/twin-stripe",
+  "updated": "2026-07-12",
+  "notes": "Both tables lint 1:1 against FIDELITY.md; FIDELITY_MATRIX.md stays a legacy pinned matrix. The payment-collection chain (F-731: PI lifecycle incl. card decline/retry + settlement/ledger/event reads), the customer-management chain (F-732), and the refunds chain (F-733 reconciliation: ledger + events closed, docs synced) carry their ruled heat (hot, F-729); the warm billing set (products/prices/subscriptions/invoice reads, shape tier) landed with F-734, which also added the named cold rows (checkout sessions, payment links, setup intents, webhook endpoints). Disputes are unlisted cold per the F-729 ruled list (catch-all 501), not warm — see the F-733 [DECISION].",
+  "tools": [
+    {
+      "name": "create_payment_intent",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment (ruled F-729): both rails — x402 crypto deposit and card (F-731), incl. one-shot create+confirm."
+    },
+    {
+      "name": "retrieve_payment_intent",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment (ruled F-729): the post-attempt read agents poll for status and last_payment_error."
+    },
+    {
+      "name": "list_payment_intents",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment (ruled F-729); cursor pagination on (created, id)."
+    },
+    {
+      "name": "confirm_payment_intent",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment (ruled F-729): card confirms attempt the charge synchronously with magic-PM declines (F-731); crypto confirm stays the documented idempotent no-op."
+    },
+    {
+      "name": "update_payment_intent",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment(card) (ruled F-729, ruling point 1): the retry-with-new-PM step after a decline (F-731)."
+    },
+    {
+      "name": "cancel_payment_intent",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment (ruled F-729): abandon step; CAS-guarded, refused once succeeded."
+    },
+    {
+      "name": "simulate_crypto_deposit",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment (ruled F-729); SB: the sealed twin's x402 settlement entry point."
+    },
+    {
+      "name": "retrieve_charge",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:settlement-verify (ruled F-729): agents read the minted (or failed, F-731) charge to verify the attempt."
+    },
+    {
+      "name": "list_charges",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:settlement-verify (ruled F-729); payment_intent / customer / created filters."
+    },
+    {
+      "name": "retrieve_balance",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:ledger-check (ruled F-729): available/pending reflect settled PIs."
+    },
+    {
+      "name": "list_balance_transactions",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:ledger-check (ruled F-729): the ledger entries minted by settles and refunds."
+    },
+    {
+      "name": "retrieve_event",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:poll-confirm (ruled F-729): no webhook delivery in v1, agents poll events."
+    },
+    {
+      "name": "list_events",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:poll-confirm (ruled F-729): the polling read; type + created filters."
+    },
+    {
+      "name": "create_refund",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:refund (ruled F-729); MCP:create_refund — the only resource keeping a dedicated tool on Stripe's official MCP server. F-733: mints the negative refund-type ledger entry and emits charge.refunded + refund.created in one transaction."
+    },
+    {
+      "name": "retrieve_refund",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:refund (ruled F-729): the post-refund verify read."
+    },
+    {
+      "name": "list_refunds",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:refund (ruled F-729); charge + payment_intent filters."
+    },
+    {
+      "name": "create_customer",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:customer-mgmt (ruled F-729): customer management is the precondition of nearly every collection chain. Vendor MCP has meta-tools only; task chain wins per rubric."
+    },
+    {
+      "name": "retrieve_customer",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:customer-mgmt (ruled F-729)."
+    },
+    {
+      "name": "update_customer",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:customer-mgmt (ruled F-729); Stripe per-key metadata merge modeled semantically."
+    },
+    {
+      "name": "delete_customer",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:customer-mgmt (ruled F-729); soft delete serves the {deleted: true} stub and detaches PMs like real Stripe."
+    },
+    {
+      "name": "list_customers",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:customer-mgmt (ruled F-729); cursor pagination + email filter."
+    },
+    {
+      "name": "list_customer_payment_methods",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:card-on-file (ruled F-729): the customer-scoped PM list is the hot read; the top-level PM list stays cold."
+    },
+    {
+      "name": "create_payment_method",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:card-on-file (ruled F-729): card PMs from test card numbers; PAN never stored. Magic decline PMs drive the F-731 card retry chain."
+    },
+    {
+      "name": "retrieve_payment_method",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:card-on-file (ruled F-729)."
+    },
+    {
+      "name": "attach_payment_method",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:card-on-file (ruled F-729): one customer per PM; a detached PM can never be reattached (Stripe lifecycle rule)."
+    },
+    {
+      "name": "detach_payment_method",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:card-on-file (ruled F-729)."
+    }
+  ],
+  "rest": [
+    {
+      "name": "POST /s/:sid/v1/payment_intents",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment (ruled F-729): both rails — x402 crypto deposit and card (F-731), incl. one-shot create+confirm."
+    },
+    {
+      "name": "GET /s/:sid/v1/payment_intents/:id",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment (ruled F-729): the post-attempt read agents poll for status and last_payment_error."
+    },
+    {
+      "name": "GET /s/:sid/v1/payment_intents",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment (ruled F-729); cursor pagination on (created, id)."
+    },
+    {
+      "name": "POST /s/:sid/v1/payment_intents/:id/confirm",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment (ruled F-729): card confirms attempt the charge synchronously with magic-PM declines (F-731); crypto confirm stays the documented idempotent no-op."
+    },
+    {
+      "name": "POST /s/:sid/v1/payment_intents/:id",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment(card) (ruled F-729, ruling point 1): update — the retry-with-new-PM step after a decline (F-731)."
+    },
+    {
+      "name": "POST /s/:sid/v1/payment_intents/:id/cancel",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment (ruled F-729): abandon step; CAS-guarded, refused once succeeded."
+    },
+    {
+      "name": "POST /s/:sid/v1/test_helpers/payment_intents/:id/simulate_crypto_deposit",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:collect-payment (ruled F-729); SB: the sealed twin's x402 settlement entry point."
+    },
+    {
+      "name": "GET /s/:sid/v1/charges/:id",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:settlement-verify (ruled F-729): agents read the minted (or failed, F-731) charge to verify the attempt."
+    },
+    {
+      "name": "GET /s/:sid/v1/charges",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:settlement-verify (ruled F-729); payment_intent / customer / created filters."
+    },
+    {
+      "name": "GET /s/:sid/v1/balance",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:ledger-check (ruled F-729): available/pending reflect settled PIs."
+    },
+    {
+      "name": "GET /s/:sid/v1/balance_transactions",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:ledger-check (ruled F-729): the ledger entries minted by settles and refunds."
+    },
+    {
+      "name": "GET /s/:sid/v1/events/:id",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:poll-confirm (ruled F-729): no webhook delivery in v1, agents poll events."
+    },
+    {
+      "name": "GET /s/:sid/v1/events",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:poll-confirm (ruled F-729): the polling read; type + created filters."
+    },
+    {
+      "name": "POST /s/:sid/v1/refunds",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:refund (ruled F-729); MCP:create_refund corroborates. F-733: full/partial refunds, over-refund + failed-charge refusals, negative refund-type ledger entry, charge.refunded + refund.created events — all in one transaction. Refund partial ops (POST /v1/refunds/:id, /cancel) stay unlisted per F-729 ruling point 4."
+    },
+    {
+      "name": "GET /s/:sid/v1/refunds/:id",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:refund (ruled F-729): the post-refund verify read."
+    },
+    {
+      "name": "GET /s/:sid/v1/refunds",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:refund (ruled F-729); charge + payment_intent filters. Omits the legacy count field (FIDELITY.md divergence #9)."
+    },
+    {
+      "name": "POST /s/:sid/v1/customers",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:customer-mgmt (ruled F-729): customer management is the precondition of nearly every collection chain."
+    },
+    {
+      "name": "GET /s/:sid/v1/customers/:id",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:customer-mgmt (ruled F-729); deleted customers serve the {deleted: true} stub like real Stripe."
+    },
+    {
+      "name": "GET /s/:sid/v1/customers",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:customer-mgmt (ruled F-729); cursor pagination + email filter, deleted rows excluded."
+    },
+    {
+      "name": "POST /s/:sid/v1/customers/:id",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:customer-mgmt (ruled F-729); Stripe per-key metadata merge (empty value unsets)."
+    },
+    {
+      "name": "DELETE /s/:sid/v1/customers/:id",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:customer-mgmt (ruled F-729); soft delete detaches the customer's PMs in the same transaction."
+    },
+    {
+      "name": "GET /s/:sid/v1/customers/:id/payment_methods",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:card-on-file (ruled F-729): the customer-scoped PM list is the hot read; the top-level GET /v1/payment_methods stays cold (loud 501)."
+    },
+    {
+      "name": "POST /s/:sid/v1/payment_methods",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:card-on-file (ruled F-729): card PMs from test card numbers (Luhn + expiry card_errors); PAN never stored. Magic decline PMs drive the F-731 card retry chain."
+    },
+    {
+      "name": "GET /s/:sid/v1/payment_methods/:id",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:card-on-file (ruled F-729)."
+    },
+    {
+      "name": "POST /s/:sid/v1/payment_methods/:id/attach",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:card-on-file (ruled F-729): one customer per PM; a detached PM can never be reattached."
+    },
+    {
+      "name": "POST /s/:sid/v1/payment_methods/:id/detach",
+      "heat": "hot",
+      "fidelity": "semantic",
+      "justification": "TC:card-on-file (ruled F-729)."
+    },
+    {
+      "name": "POST /s/:sid/v1/products",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "TC:subscription-billing (ruled F-729): chain too long for semantic in the M5 window; shape keeps agents off 501s. Vendor MCP: meta-tools only. F-734."
+    },
+    {
+      "name": "GET /s/:sid/v1/products/:id",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "TC:subscription-billing (ruled F-729). F-734."
+    },
+    {
+      "name": "GET /s/:sid/v1/products",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "TC:subscription-billing (ruled F-729); cursor pagination + active filter. F-734."
+    },
+    {
+      "name": "POST /s/:sid/v1/prices",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "TC:subscription-billing (ruled F-729): referential check on product; recurring vs one_time from recurring.interval. F-734."
+    },
+    {
+      "name": "GET /s/:sid/v1/prices/:id",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "TC:subscription-billing (ruled F-729). F-734."
+    },
+    {
+      "name": "GET /s/:sid/v1/prices",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "TC:subscription-billing (ruled F-729); cursor pagination + product/active filters. F-734."
+    },
+    {
+      "name": "POST /s/:sid/v1/subscriptions",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "TC:subscription-billing (ruled F-729): live customer + existing item prices referentially checked; created active with no invoice minted and no event emitted (shape tier). F-734."
+    },
+    {
+      "name": "GET /s/:sid/v1/subscriptions/:id",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "TC:subscription-billing (ruled F-729); items carry the expanded Price object like real Stripe. F-734."
+    },
+    {
+      "name": "GET /s/:sid/v1/subscriptions",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "TC:subscription-billing (ruled F-729); excludes canceled by default, status/customer filters. F-734."
+    },
+    {
+      "name": "POST /s/:sid/v1/subscriptions/:id",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "TC:subscription-billing (ruled F-729): per-key metadata merge + cancel_at_period_end flip; canceled subscriptions accept metadata-only updates like real Stripe. F-734."
+    },
+    {
+      "name": "DELETE /s/:sid/v1/subscriptions/:id",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "TC:subscription-billing (ruled F-729): immediate cancel, no proration or final invoice (shape tier). F-734."
+    },
+    {
+      "name": "GET /s/:sid/v1/invoices/:id",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "TC:subscription-billing (ruled F-729, ruling point 2: reads only). Always 404 resource_missing — nothing in the twin mints an invoice; invoice writes stay unlisted-cold. F-734."
+    },
+    {
+      "name": "GET /s/:sid/v1/invoices",
+      "heat": "warm",
+      "fidelity": "shape",
+      "justification": "TC:subscription-billing (ruled F-729, ruling point 2: reads only). Always the empty Stripe list envelope (documented divergence). F-734."
+    },
+    {
+      "name": "ALL /s/:sid/v1/checkout/sessions*",
+      "heat": "cold",
+      "fidelity": "unsupported",
+      "justification": "PS (ruled F-729): human-redirect flow outside the machine-payments scope. Named cold — agents plausibly probe it; loud 501 pinned by unsupported.test.ts and the fidelity:parity probe. F-734."
+    },
+    {
+      "name": "ALL /s/:sid/v1/payment_links*",
+      "heat": "cold",
+      "fidelity": "unsupported",
+      "justification": "PS (ruled F-729): human-redirect flow. Named cold; loud 501 pinned by unsupported.test.ts. F-734."
+    },
+    {
+      "name": "ALL /s/:sid/v1/setup_intents*",
+      "heat": "cold",
+      "fidelity": "unsupported",
+      "justification": "PS (ruled F-729, ruling point 3): card-on-file is modeled via direct PM attach (F-732); agents plausibly probe SetupIntents. Named cold; loud 501 pinned by unsupported.test.ts. F-734."
+    },
+    {
+      "name": "ALL /s/:sid/v1/webhook_endpoints*",
+      "heat": "cold",
+      "fidelity": "unsupported",
+      "justification": "PS (ruled F-729, ruling point 3): no webhook delivery loop in v1 (divergence #5), agents poll /v1/events. Named cold; loud 501 pinned by unsupported.test.ts. F-734."
+    }
+  ],
+  "doc_drift": []
+}

package/node_modules/@pome-sh/twin-stripe/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pome-sh/twin-stripe",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "Deterministic test double for Stripe x402 machine payments — stateful clone agents can drive without burning sandbox quota or real chain gas.",
   "private": false,
   "type": "module",
@@ -26,7 +26,8 @@
   "files": [
     "dist",
     "FIDELITY.md",
-    "README.md"
+    "README.md",
+    "fidelity.inventory.json"
   ],
   "publishConfig": {
     "access": "public"
@@ -52,8 +53,8 @@
   "license": "Apache-2.0",
   "dependencies": {
     "@hono/node-server": "^2.0.8",
-    "@pome-sh/sdk": "0.3.1",
-    "@pome-sh/shared-types": "0.6.0",
+    "@pome-sh/sdk": "0.4.0",
+    "@pome-sh/shared-types": "0.9.0",
     "hono": "^4.12.27",
     "zod": "^4.1.13"
   },

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pome-sh/cli",
-  "version": "0.1.1",
-  "description": "Digital-twin testing for AI agents — run scenarios against resettable local or hosted twins, record tool calls, and score the result.",
+  "version": "0.2.0",
+  "description": "Digital-twin testing for AI agents — run scenarios against resettable local or hosted twins and record tool-call traces for evaluation on pome.sh.",
   "keywords": [
     "ai",
     "agents",
@@ -43,7 +43,7 @@
     "access": "public"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.build.json && node scripts/copy-prompts.mjs && node -e \"fs.chmodSync('dist/src/cli/main.js', 0o755)\"",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json && node scripts/copy-prompts.mjs && node -e \"fs.chmodSync('dist/src/cli/main.js', 0o755)\"",
     "dev": "tsx src/cli/main.ts",
     "pome": "node dist/src/cli/main.js",
     "prepare": "npm run build",
@@ -66,11 +66,11 @@
     "@anthropic-ai/sdk": "^0.110.0",
     "@hono/node-server": "^2.0.6",
     "@openrouter/ai-sdk-provider": "^3.0.0",
-    "@pome-sh/sdk": "0.3.1",
-    "@pome-sh/shared-types": "0.6.0",
-    "@pome-sh/twin-github": "0.1.2",
-    "@pome-sh/twin-slack": "0.1.2",
-    "@pome-sh/twin-stripe": "0.2.2",
+    "@pome-sh/sdk": "0.4.0",
+    "@pome-sh/shared-types": "0.9.0",
+    "@pome-sh/twin-github": "0.2.0",
+    "@pome-sh/twin-slack": "0.2.0",
+    "@pome-sh/twin-stripe": "0.2.3",
     "ai": "^7.0.18",
     "commander": "^15.0.0",
     "hono": "^4.10.7",

package/skills/pome-setup/SKILL.md

@@ -131,7 +131,7 @@ next steps:
 
 | Symptom | Fix |
 | --- | --- |
-| `npm install @pome-sh/adapter-claude-sdk` 404s | The adapter's npm publish is staged (OSS Launch Stage 1). Inside a pome-twins checkout, depend on it via `"@pome-sh/adapter-claude-sdk": "file:<checkout>/packages/adapter-claude-sdk"`; external repos should watch the pome release notes. |
+| `npm install @pome-sh/adapter-claude-sdk` fails | Confirm registry access (`npm view @pome-sh/adapter-claude-sdk version`). Inside a pome-twins checkout you can also pin `"@pome-sh/adapter-claude-sdk": "file:<checkout>/packages/adapter-claude-sdk"` while iterating on unpublished workspace changes. |
 | doctor: "reads from a hardcoded https://api.github.com" | A production-host literal survives in agent source — even a `?? "https://api.github.com"` fallback triggers it. Move the fallback out of source; read `POME_GITHUB_REST_URL`. |
 | doctor: "twin not reachable" | Twin dependencies missing — run the repo's install (`npm install` / `npm install`) and re-run `pome doctor`. |
 | doctor: "egress floor disabled" | Remove `*` from `POME_EGRESS_ALLOW`. Never widen egress to pass a check. |